NSE4_FGT-7.0 · Question #179
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
The correct answer is B. FortiGate uses the SMB protocol to read the event viewer logs from the DCs. D. FortiGate directs the collector agent to use a remote LDAP server. FortiGate FSSO agentless polling mode uses SMB to read event logs from domain controllers and leverages LDAP to retrieve group membership information.
Question
Which two statements about FortiGate FSSO agentless polling mode are true? (Choose two.)
Options
- AFortiGate uses the AD server as the collector agent.
- BFortiGate uses the SMB protocol to read the event viewer logs from the DCs.
- CFortiGate does not support workstation check.
- DFortiGate directs the collector agent to use a remote LDAP server.
How the community answered
(24 responses)- B96% (23)
- C4% (1)
Why each option
FortiGate FSSO agentless polling mode uses SMB to read event logs from domain controllers and leverages LDAP to retrieve group membership information.
The AD server provides user information but does not function as the FSSO collector agent itself.
In FSSO agentless polling mode, the FortiGate directly connects to domain controllers (DCs) and utilizes the SMB protocol to read security event viewer logs, which contain user logon and logoff events.
FortiGate FSSO agentless polling mode does support workstation checks to verify the active login status of users.
While there isn't a separate 'collector agent' software in agentless mode, the FortiGate itself performs the collection functions and queries the Active Directory server using LDAP to retrieve user group information.
Concept tested: FortiGate FSSO agentless polling mechanism
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526749/fortinet-single-sign-on-fsso-polling-mode
Topics
Community Discussion
No community discussion yet for this question.